Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Yh3LnmS6LAJNdoVsQE3LR1++hZ3QBbG4r+1hr43qCHU=
Subject key identifier:   D0:DF:DD:12:91:81:22:FB:FE:71:92:A2:64:40:6E:14:BB:7A:48:E2
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       05B2FE660F532624F432B450BC33B326CADA5473
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:34 +0000
ROA not before:           Tue 05 Mar 2024 18:10:34 +0000
ROA not after:            Tue 04 Mar 2025 18:15:34 +0000
asID:                     271891
IP address blocks:        2801:151:63::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b2:fe:66:0f:53:26:24:f4:32:b4:50:bc:33:b3:26:ca:da:54:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:34 2024 GMT
            Not After : Mar  4 18:15:34 2025 GMT
        Subject: CN=D0DFDD12918122FBFE7192A264406E14BB7A48E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:09:f9:68:8c:9d:97:6d:74:00:4a:62:3f:
                    b0:77:00:af:c2:bb:07:07:8e:00:1a:4c:8b:98:34:
                    b0:42:38:1c:a5:1a:df:1f:55:80:f6:4d:1b:db:30:
                    57:6f:7d:52:e6:35:c6:5b:0d:3e:7f:b9:df:eb:a9:
                    6b:d2:39:a2:52:31:8d:10:7d:30:04:7e:b5:37:e5:
                    aa:b7:39:65:1d:4c:4e:25:2d:c6:d9:84:07:17:45:
                    25:b5:e9:56:ac:98:8a:87:03:a9:00:d5:fa:aa:01:
                    5b:22:7b:13:6a:0d:98:29:d4:ff:13:cc:e4:2f:23:
                    31:47:86:fb:b6:81:7b:6e:7e:1b:47:0e:e7:04:61:
                    fd:67:6b:41:59:a8:9e:14:ca:cb:86:81:09:7e:1b:
                    1c:af:c8:21:a3:fc:92:3f:b3:46:e5:3d:96:f4:9e:
                    c8:f4:97:0f:c7:22:7e:18:9a:ca:d1:34:8a:d8:06:
                    ea:ec:d1:91:92:83:88:fa:d3:ee:e4:81:2b:29:42:
                    a1:26:1f:19:f3:5c:77:80:20:a6:9b:50:b4:15:72:
                    a7:dc:4c:ba:f5:e3:dc:ad:e7:bb:48:d5:5f:bc:29:
                    33:b8:60:25:ed:64:b2:a7:6e:e5:ed:13:49:39:7f:
                    70:ad:21:67:1b:fe:3f:50:6c:43:62:ed:a7:02:5c:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DF:DD:12:91:81:22:FB:FE:71:92:A2:64:40:6E:14:BB:7A:48:E2
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:63::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:ce:c3:f0:27:06:fd:3f:88:5a:ec:91:8d:08:23:a5:59:
         db:bd:5b:3c:c7:15:d3:24:e5:65:c0:07:0f:6a:67:35:3f:90:
         64:b5:d9:55:cf:d8:20:bc:51:e0:16:8d:cd:d6:e0:0c:17:0f:
         e0:af:ff:ab:6e:0a:83:08:50:21:5f:ca:61:57:72:0c:96:06:
         e9:90:ae:ec:50:11:81:45:5c:2c:01:c4:3a:68:bc:c7:3d:e9:
         c1:12:9f:05:5f:27:8e:88:8a:d3:1f:c5:8f:b7:d7:a0:78:6e:
         5e:42:9b:db:67:92:2a:8a:e8:b5:f9:24:a6:92:9b:90:d0:7a:
         ac:0b:54:1b:e6:98:a4:af:4d:fc:c9:78:60:3e:2a:a8:26:d1:
         ed:04:8b:a5:dc:da:3a:59:26:e4:31:f8:77:4d:21:76:10:a7:
         1c:e6:a1:37:6c:b3:54:e2:de:9e:c3:2c:29:77:3d:b5:ef:a6:
         82:55:d6:1d:2a:4c:74:aa:28:c3:fa:3f:10:ed:fa:ac:0b:e4:
         d5:4f:ed:2c:7c:af:15:2d:74:62:fa:bd:c3:ac:2e:96:90:04:
         43:12:b4:72:e2:ee:6e:eb:03:3f:4d:bb:c6:6f:10:27:77:88:
         e5:2b:c5:e4:8c:2d:59:36:04:70:3e:7e:c3:af:bd:cf:32:6c:
         ed:f1:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org